Lucene search
K

35 matches found

Tenable Nessus
Tenable Nessus
added 2025/12/02 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-66421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS5.3AI score0.00138EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/02 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-66420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67. CVE-2025-66420 Note that Nessus...

5.4CVSS5.9AI score0.00141EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/01 8:26 p.m.2 views

CVE-2025-66421

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS6.2AI score0.00138EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/01 8:26 p.m.3 views

CVE-2025-66420

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

5.4CVSS5.9AI score0.00141EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/30 3:30 a.m.7 views

EUVD-2025-199920

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS5.8AI score0.00138EPSS
Exploits0References3
EUVD
EUVD
added 2025/11/30 3:30 a.m.3 views

EUVD-2025-199921

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

5.4CVSS5.5AI score0.00141EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2025/11/30 3:30 a.m.3 views

Tryton sao allows XSS via an HTML attachment

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

5.4CVSS6.1AI score0.00141EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2025/11/30 3:30 a.m.5 views

Tryton sao allows XSS because it does not escape completion values

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS6.3AI score0.00138EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/11/30 3:30 a.m.4 views

GHSA-XHGV-99MJ-8M2X Tryton sao allows XSS via an HTML attachment

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

5.4CVSS6AI score0.00141EPSS
Exploits0References4
OSV
OSV
added 2025/11/30 3:30 a.m.4 views

GHSA-6QJ9-2G9M-29X9 Tryton sao allows XSS because it does not escape completion values

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS6.2AI score0.00138EPSS
Exploits0References4
NVD
NVD
added 2025/11/30 3:15 a.m.7 views

CVE-2025-66421

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS0.00138EPSS
Exploits0References2
OSV
OSV
added 2025/11/30 3:15 a.m.4 views

DEBIAN-CVE-2025-66421

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS5.1AI score0.00138EPSS
Exploits0References1
NVD
NVD
added 2025/11/30 3:15 a.m.4 views

CVE-2025-66420

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

5.4CVSS0.00141EPSS
Exploits0References2
OSV
OSV
added 2025/11/30 3:15 a.m.3 views

DEBIAN-CVE-2025-66420

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

5.4CVSS5.1AI score0.00141EPSS
Exploits0References1
OSV
OSV
added 2025/11/30 3:15 a.m.1 views

UBUNTU-CVE-2025-66420

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

5.4CVSS5.8AI score0.00141EPSS
Exploits0References4
OSV
OSV
added 2025/11/30 3:15 a.m.0 views

UBUNTU-CVE-2025-66421

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS5.8AI score0.00138EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/30 12:0 a.m.4 views

Tryton sao 跨站脚本漏洞

Tryton sao is a web client for Tryton's open source Universal Application Platform. A cross-site scripting vulnerability exists in Tryton sao versions prior to 7.6.9, which stems from an HTML attachment that could lead to a cross-site scripting attack...

5.4CVSS5.7AI score0.00141EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/30 12:0 a.m.4 views

PT-2025-48377

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

5.4CVSS6AI score0.00141EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/30 12:0 a.m.3 views

CVE-2025-66420

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

5.4CVSS5.7AI score0.00141EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/30 12:0 a.m.1 views

CVE-2025-66421

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS5.9AI score0.00138EPSS
Exploits0References2
Rows per page
Query Builder